Fix use-after-free around DISTINCT transition function calls.

Heikki Linnakangas <heikki.linnakangas@iki.fi>

Commit: d8589946ddd5c43e1ebd01c5e92d0e177cbfc198
Author: Heikki Linnakangas <heikki.linnakangas@iki.fi>
Date: 2016-10-17T09:13:16Z
Releases: 10.0
Fix use-after-free around DISTINCT transition function calls.

Have tuplesort_gettupleslot() copy the contents of its current table slot
as needed. This is based on an approach taken by tuplestore_gettupleslot().
In the future, tuplesort_gettupleslot() may also be taught to avoid copying
the tuple where caller can determine that that is safe (the
tuplestore_gettupleslot() interface already offers this option to callers).

Patch by Peter Geoghegan. Fixes bug #14344, reported by Regina Obe.

Report: <20160929035538.20224.39628@wrigleys.postgresql.org>

Backpatch-through: 9.6

Files

PathChange+/−
src/backend/utils/sort/tuplesort.c modified +9 −0